Traffic Trace Info


DumpFile: 200708101400.dump
FileSize: 1391.07MB
Id: 200708101400
StartTime: Fri Aug 10 14:00:01 2007
EndTime: Fri Aug 10 14:15:00 2007
TotalTime: 899.50 seconds
TotalCapSize: 1086.65MB CapLen: 96 bytes
# of packets: 19945414 (12583.29MB)
AvgRate: 117.30Mbps stddev:15.34M

IP flow (unique src/dst pair) Information

# of flows: 697797 (avg. 28.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.8% 1.1% 1.0% 0.9% 0.7% 0.7% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 440723
Top 10 bandwidth usage (bytes/total in %):
21.5% 12.7% 12.0% 4.6% 3.0% 2.3% 1.8% 1.5% 1.3% 1.2%
# of IPv6 addresses: 1662
Top 10 bandwidth usage (bytes/total in %):
24.1% 24.1% 6.8% 6.2% 5.1% 4.9% 4.8% 4.8% 4.6% 3.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5625928
 [   64-  127]:    4667693
 [  128-  255]:     551455
 [  256-  511]:     514120
 [  512- 1023]:     488850
 [ 1024- 2047]:    8097368


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19945414 (100.00%)      13194537949 (100.00%)    661.53
 ip            19876315 ( 99.65%)      13179853618 ( 99.89%)    663.09
  tcp          16925088 ( 84.86%)      12599372074 ( 95.49%)    744.42
   http(s)      7340823 ( 36.80%)      10018167988 ( 75.93%)   1364.72
   http(c)      5353607 ( 26.84%)        572803804 (  4.34%)    106.99
   squid         563888 (  2.83%)        388868696 (  2.95%)    689.62
   smtp          414447 (  2.08%)        124963623 (  0.95%)    301.52
   nntp              12 (  0.00%)              750 (  0.00%)     62.50
   ftp            16636 (  0.08%)          6701874 (  0.05%)    402.85
   pop3           24899 (  0.12%)         18223060 (  0.14%)    731.88
   imap           19695 (  0.10%)         17823869 (  0.14%)    904.99
   telnet           368 (  0.00%)            25763 (  0.00%)     70.01
   ssh           206251 (  1.03%)         46958878 (  0.36%)    227.68
   dns            21450 (  0.11%)          3733180 (  0.03%)    174.04
   bgp              445 (  0.00%)           252227 (  0.00%)    566.80
   napster           12 (  0.00%)             1125 (  0.00%)     93.75
   realaud            7 (  0.00%)              876 (  0.00%)    125.14
   rtsp          494981 (  2.48%)        187929960 (  1.42%)    379.67
   icecast        17370 (  0.09%)          1105556 (  0.01%)     63.65
   other        2450193 ( 12.28%)       1211810605 (  9.18%)    494.58
  udp           2320806 ( 11.64%)        434524500 (  3.29%)    187.23
   dns          1630883 (  8.18%)        193526204 (  1.47%)    118.66
   realaud          931 (  0.00%)            68074 (  0.00%)     73.12
   halflif           16 (  0.00%)             2631 (  0.00%)    164.44
   starcra           23 (  0.00%)             4147 (  0.00%)    180.30
   everque           45 (  0.00%)             8273 (  0.00%)    183.84
   unreal            14 (  0.00%)             1684 (  0.00%)    120.29
   quake              9 (  0.00%)              740 (  0.00%)     82.22
   cuseeme            6 (  0.00%)              699 (  0.00%)    116.50
   other         688801 (  3.45%)        240896393 (  1.83%)    349.73
  icmp           274987 (  1.38%)         29438037 (  0.22%)    107.05
  ipip              364 (  0.00%)            44624 (  0.00%)    122.59
  ipsec            1138 (  0.01%)           981516 (  0.01%)    862.49
  ip6              9506 (  0.05%)          5437826 (  0.04%)    572.04
  other          344426 (  1.73%)        110055041 (  0.83%)    319.53
  frag             1491 (  0.01%)          1242752 (  0.01%)    833.50
 ip6              69099 (  0.35%)         14684331 (  0.11%)    212.51
  tcp6            13330 (  0.07%)          5157253 (  0.04%)    386.89
   http(s)          193 (  0.00%)           148655 (  0.00%)    770.23
   http(c)         8075 (  0.04%)          1037767 (  0.01%)    128.52
   smtp             337 (  0.00%)            70853 (  0.00%)    210.25
   ftp               67 (  0.00%)             9616 (  0.00%)    143.52
   ssh              381 (  0.00%)            68906 (  0.00%)    180.86
   bgp              117 (  0.00%)            12607 (  0.00%)    107.75
   other           4160 (  0.02%)          3808849 (  0.03%)    915.59
  udp6            45365 (  0.23%)          8106104 (  0.06%)    178.69
   dns            45267 (  0.23%)          8095250 (  0.06%)    178.83
   other             98 (  0.00%)            10854 (  0.00%)    110.76
  icmp6           10182 (  0.05%)          1388751 (  0.01%)    136.39
  ip6               183 (  0.00%)            27279 (  0.00%)    149.07
  pim6               39 (  0.00%)             4944 (  0.00%)    126.77


tcpdump file: 200708101400.dump.gz (506.53 MB)